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Revitalization  of  the  aggres¬ 
sor  program  provides  expanded 
training  opportunities  in  the  air, 
space,  and  cyber  realms.  The  follow¬ 
ing  discussion  details  basic  principles  of  the 
aggressor  program,  developed  over  time  by 
organizations  whose  express  objective  has 
been  to  expose  weaknesses  in  current  systems 
and  tactics  in  order  to  improve  them.  The  ar¬ 
ticle  then  looks  to  the  future  as  the  aggressor 
program  integrates  space  and  cyber  capabili¬ 
ties  into  its  existing  activities  involving  air  and 
air  defense. 

With  the  current  pace  of  operations,  train¬ 
ing  for  the  full  spectrum  of  conflict  has  in 
large  part  given  way  to  the  need  to  focus  on 
today’s  battle — as  it  should.  High-end  training 
opportunities  are  limited  for  any  number  of 
reasons,  but  at  some  point  in  the  future,  we 
will  likely  need  to  employ  in  major  combat  op¬ 
erations,  bringing  to  bear  technological  ad¬ 
vantages  the  United  States  has  developed  and 
maintained  over  the  years.  But  the  US  Air 
Force  cannot  attribute  its  success  during  the 
last  61  years  only  to  superior  technology;  in 


fact,  we  can  blame  dependence  on  technology 
during  the  Vietnam  War  for  higher-than- 
expected  attrition  in  the  air.  Rather,  the  way  the 
Air  Force  employs  technology  has  enabled  the 
service  to  stay  ahead  of  its  adversaries.  Effec¬ 
tive,  realistic  training  prepares  Airmen  to  use 
their  weapons  systems  in  expected  roles  and 
missions;  it  also  prepares  them  to  deal  with 
the  unexpected.  Such  training  teaches  them 
not  what  to  think,  but  how  to  think,  react,  im¬ 
provise,  adapt,  and  overcome. 

The  opposing  force  (OPFOR  or  “Red”), 
“the  stone  upon  which  the  Air  Force  hones  its 
combat  skills,”  constitutes  a  key  component  of 
realistic,  meaningful  training.1  If  the  OPFOR 
presents  an  outdated,  unrealistic,  or  otherwise 
nonrepresentative  threat,  then  Airmen  learn 
the  wrong  lessons  or  don’t  learn  at  all.  Giulio 
Douhet’s  observation  that  “victory  smiles  upon 
those  who  anticipate  the  changes  in  the  char¬ 
acter  of  war,  not  upon  those  who  wait  to  adapt 
themselves  after  the  changes  occur”  may  be 
true,  but  beyond  solid  preparation,  one  must 
also  be  able  to  deal  with  the  unexpected.2  A 
valid  OPFOR  assesses  the  present  and  looks  to 


*The  author  is  commander  of  the  35th  Fighter  Wing,  Misawa  Air  Base,  Japan. 
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the  future  to  anticipate  and  replicate  the  next 
threat,  and  it  does  so  independently  of  the 
mainstream  or  “Blue”  forces.  In  doing  so,  it 
both  prepares  Blue  for  what’s  coming  next 
and  develops  tactical  flexibility  as  Blue  forces, 
executing  established  tactics,  techniques,  and 
procedures  (TTP),  learn  to  adapt  them  to  the 
unique  problem  presented.  Foundational  tac¬ 
tical  training  has  to  develop  a  baseline  from 
which  we  can  adapt,  improvise,  and  overcome. 
The  reinvigorated  Air  Force  aggressor  pro¬ 
gram,  dedicated  to  analyzing  and  presenting 
current  and  emerging  adversary  systems  and 
tactics,  offers  tactical  problems  that  reinforce 
baseline  training  as  well  as  develop  flexibility 
and  stimulate  thought. 

The  aggressor  program  has  provided  com¬ 
bat  air  forces  (CAF)  this  high-end  training  for 
the  last  36  years.  The  program  stood  up  in 
1972  during  the  final  phase  of  the  Vietnam 
War,  when  the  vaunted  technological  and  tac¬ 
tical  superiority  of  American  fighters  and  pi¬ 
lots  netted  a  depressing  2.4:1  kill  ratio,  de¬ 
creasing  at  one  point  to  parity  as  F-4  Phantoms 
and  F-105  Thuds  traded  shots  with  Commu¬ 
nist  MiG-19  Farmers  and  MiG-21  Fishbeds.3 
Although  we  now  accept  the  OPFOR  as  a 
means  of  providing  positive  training,  in  1972 
the  concept  of  dedicating  units  exclusively  to 
studying/ teaching  enemy  tactics  in  jets  similar 
to  MiGs  was  fraught  with  risk — at  a  time  when 
risk  mitigation  was  the  watchword.  To  fly  dis¬ 
similar  air  combat  training  was  to  invite  disas¬ 
ter.  CAF  leadership  held  that  pilots  who  had 
trained  exclusively  against  their  own  fighter 
types  would  dangerously  mishandle  faster  or 
more  agile  adversary  aircraft,  resulting  in  loss 
of  control  or  midair  collision — bent  metal  and 
dead  aircrews.4  Today,  the  benefits  of  this  sort 
of  training  are  a  given;  dissimilar  air  combat 
training  is  necessary  to  prepare  aircrews  to 
fight  the  ultimate  in  dissimilar  aircraft:  those 
of  real-world  adversaries. 

Initially,  aggressors’  offers  to  travel  to  a  host 
base  to  fly  and  teach  elicited  a  tepid  response: 
“At  the  time  accident  rates  in  the  tactical  air 
forces  were  high.  ‘Wing  commanders  were 
scared  to  have  us  come.’”5  “A  bunch  of  guys 
[from]  Nellis”  not  only  would  drive  up  acci¬ 
dent  rates  even  higher  but  also  would  invite 


greater  scrutiny.  If  a  unit  performed  poorly,  its 
leaders  feared  that  the  aggressors  would  keep 
track  and  report  their  findings  up  the  chain  of 
command.  But  in  1973,  the  F-4  training  unit 
at  Homestead  AFB,  Florida,  agreed  to  host  the 
new  64th  Aggressor  Squadron’s  (AGRS)  pilots 
and  their  T-38s,  aircraft  that  approximated 
MiG-21s  in  size  and  maneuverability.6  The  first 
“Aggressor  Road  Show”  sought  to  present  a 
realistic  replication  of  MiG  capabilities  and 
tactics  observed  in  Vietnam,  tailoring  it  to  the 
audience  and  thus  enabling  student  as  well  as 
instructor  F-4  crews  at  Homestead  to  learn 
from  trial  and  error,  minus  the  threat  of  real 
missiles  and  bullets.  Thirty-five  years  later, 
fighter  wings  are  eager  to  have  the  aggressors 
visit — in  some  ways,  tactical  execution  becomes 
simpler  when  crews  fight  dissimilar  platforms 
(because  fighting  against  similar  aircraft  com¬ 
plicates  the  beyond-visual-range  and  within- 
visual-range  identification  process) .  Aggressor 
training  also  brings  with  it  the  element  of  the 
unknown,  which  challenges  and  hones  an  air¬ 
crew’s  adaptability. 

Valid  Training? 

Eleven  years  after  the  Homestead  AFB  road 
show,  Maj  Gen  Eugene  Fischer,  commander 
of  the  Air  Force  Tactical  Fighter  Weapons 
Center  at  Nellis  AFB,  Nevada,  assembled  all  of 
the  64th  and  65th  AGRS  pilots,  berating  them 
for  the  unprofessional  behavior  of  a  number 
of  the  flyers.7  The  aggressor  Class  A  (loss  of 
life,  loss  of  aircraft,  or  damage  in  excess  of  $1 
million)  accident  rate  had  skyrocketed  in  1984 
to  22.9  events  per  100,000  hours  of  flying;  be¬ 
tween  them,  the  64th  and  65th  had  crashed 
five  F-5  aircraft  in  a  year’s  time.  Without  the 
aggressors,  Tactical  Air  Command’s  (TAC)  ac¬ 
cident  rate  was  1.9,  roughly  the  same  as  today’s.8 
The  establishment’s  worst  fears  had  been  real¬ 
ized — instead  of  making  the  Air  Force  stron¬ 
ger,  the  program  was  actually  decreasing  the 
service’s  capability.  Mechanical  malfunction 
accounted  for  only  one  of  a  spate  of  accidents; 
the  others  resulted  from  pilot  error.  The  ag¬ 
gressors  prided  themselves  in  selecting  the 
best  stick-and-rudder  pilots  available,  so  the 
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accidents  weren’t  due  to  a  lack  of  pilot  skill. 
Instead,  General  Fischer  focused  on  the  pi¬ 
lots’  motivation,  narrowing  the  problem  to  at¬ 
titude — the  development  of  an  egocentric 
“win  at  all  costs”  approach  to  the  aggressor 
mission.  Despite  existing  for  the  sole  purpose 
of  providing  high-fidelity  training  to  opera¬ 
tional  flying  units,  the  aggressors  had  devel¬ 
oped  a  reputation  as  “cowboys”  who  bent  or 
broke  rules  in  the  name  of  teaching  aircrews 
by  “punishing  errors.”  On  the  one  hand,  their 
charter  called  for  presenting  an  adversary 
tough  enough  to  challenge  the  Blue  force  and 
improve  its  tactical  skills.  However,  one  could 
always  find  intelligence  to  rationalize  this  “Nellis 
freestyle”  approach  to  adversary  support,  one 
that  contributed  to  the  win-at-all-costs  mind¬ 
set.9  On  the  other  hand,  although  the  aggres¬ 
sors  presented  a  challenging  threat,  it  had 
grown  increasingly  unrealistic — the  desired 
end  state  had  become  defeating  Blue,  not 
making  Blue  better.10 

In  1990  the  aggressor  program  found  itself 
in  trouble  once  again,  this  time  due  to  shrink¬ 
ing  budgets.  During  the  post-Cold  War  budget- 
prioritization  debate,  fiscal  pressures  overcame 
the  value  of  the  program.  Because  the  aggres¬ 
sors  could  not  provide  adversary  support  to  all 
fighter  units  at  once,  wings  continued  to  train 
internally,  using  their  own  aircraft  and  pilots 
to  simulate  the  threat.  This  practice  continues 
today:  tactics  manuals  give  guidance  on  how 
to  replicate  adversary  aircraft,  weapons,  and 
tactics,  but  operational  aircrews  who  support 
Blue  training  as  Red  Air  do  so  to  the  detri¬ 
ment  of  their  own  Blue  skills.  Consequently, 
Air  Combat  Command  (the  follow-on  to  TAC) 
limits  the  number  of  Red  Air  sorties  aircrews 
can  use  as  credit  toward  annual  training  re¬ 
quirements.11  As  Blue  equipment  and  mis¬ 
sions  become  increasingly  complex,  pilots 
find  it  more  difficult  to  invest  the  time  re¬ 
quired  to  learn  and  properly  execute  emerg¬ 
ing  adversary  tactics.  However,  from  a  purely 
programmatic  perspective,  it  costs  less  to  add 
sorties  to  existing  flying-hour  programs  for 
operational  units  to  use  as  Red  Air  than  to 
stand  up  and  support  dedicated  adversary 
squadrons.12  With  this  in  mind,  the  Air  Force 
closed  F-5  aggressor  units  in  Pacific  Air  Forces 


and  US  Air  Forces  in  Europe  (the  26th  and 
527th  AGRS,  respectively)  as  well  as  the  65th 
AGRS  at  Nellis.  The  64th  AGRS  was  drawn 
down  to  a  flight-sized  unit  with  six  authorized 
F-16s  and  10  pilots  and  then  subsumed  by  the 
414th  Combat  Training  Squadron  (Red  Flag) . 13 
This  professional  core  unit  would  train  air¬ 
crews  on  temporary  assignment  to  Nellis  to 
augment  the  Red  Air  presentation  during  Red 
Flag  exercises  and  USAF  Weapons  School  sup¬ 
port.  Although  this  arrangement  permitted  a 
numerically  challenging  threat  picture,  the 
part-time  aggressors  did  not  have  the  same 
grounding  in  tactics  as  did  the  professionals, 
so  in  the  end,  the  value  of  training  decreased. 

In  2003  Gen  T.  Michael  Moseley,  vice-chief 
of  staff  at  the  time,  reinvigorated  the  aggres¬ 
sor  program  at  Nellis,  renewing  the  64th 
AGRS  and  initially  expanding  it  to  a  primary 
aircraft  authorization  (PAA)  ofl2F-16s  (even¬ 
tually  increasing  to  24  in  2009). 14  In  2006  he 
reconstituted  the  65th  AGRS,  this  time  in  F-15C 
Eagles  with  upgraded  radars  and  avionics. 
Whereas  in  the  past,  the  aggressor  program 
simulated  the  threat  with  older,  less-capable 
Air  Force  fighters  to  reduce  costs,  upgraded 
F-15s  enabled  the  squadron  to  accurately  rep¬ 
licate  fourth-generation  fighters  of  the  former 
Soviet  Union.  Flying-unit  deactivations  made 
the  F-15s  available,  and  experience  gained  from 
training  against  the  former  Soviet  Union’s 
modern  fighters,  flown  by  countries  such  as 
Germany,  Malaysia,  and  India,  drove  home 
the  reality  that  we  cannot  ignore  near-peer  air 
forces — that  aggressor  replication  needs  to  in¬ 
clude  the  most  dangerous  potential  oppo¬ 
nents.  In  many  ways,  the  65th  AGRS’s  F-15s 
are  technologically  more  capable  than  some 
operational  Eagle  squadrons. 

At  the  same  time,  the  aggressor  program 
expanded  to  bring  all  air  and  air  defense  (for 
brevity  this  article  refers  to  both  as  “air”), 
space,  and  cyberspace  aggressor  activities  un¬ 
der  one  roof  as  part  of  the  57th  Adversary  Tac¬ 
tics  Group  (ATG),  which  includes  the  547th 
Intelligence  Squadron,  thus  continuing  the 
hand-in-glove  relationship  between  aggressors 
and  intelligence.  Likewise,  every  other  squad¬ 
ron  in  the  ATG  includes  intelligence  personnel 
who  help  focus  the  collection  of  information 
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and  conduct  research.  An  important  element 
of  the  aggressor  program  is  the  close  relation¬ 
ship  between  operations  and  intelligence — all 
aggressor  operators  are  schooled  in  intelli¬ 
gence  capabilities  and  limitations,  spending  a 
significant  amount  of  time  studying  the  adver¬ 
sary.15  With  continuous  exposure  to  opera¬ 
tions,  intelligence  officers  and  enlisted  mem¬ 
bers  acquire  a  much  better  appreciation  for 
the  efforts  they  support  than  they  get  else¬ 
where.  Since  its  inception,  the  aggressor  pro¬ 
gram  has  capitalized  on  integrating  otherwise 
separate  disciplines. 

The  ATG  continues  in  this  mold  today;  part 
of  its  charter  involves  integrating  all  aggressor 
activity  in  the  air/ space/ cyber  domains  under 
one  centralized,  independent  organization  in 
order  to  present  the  most  threat-representative 
adversary  possible.  Doing  so  will  enable  the 
ATG  to  present  a  coherent,  realistic  air/ space/ 
cyber  picture  of  the  adversary.  An  active,  pro¬ 
fessional  aggressor  program  allows  opera¬ 
tional  units  to  concentrate  on  honing  their 
tactics  without  the  additional  burden  of  de¬ 
ploying  to  Nellis  to  provide  adversary  support 
to  the  Weapons  School  and  Red  Flag.  The 
ATG  concept  enables  high-quality,  accurate, 
and  predictive  threat  training.  It  also  has  the 
potential  to  pay  for  itself  as  it  assumes  respon¬ 
sibility  for  all  adversary  support  for  the  Weap¬ 
ons  School,  the  422nd  Test  and  Evaluation 
Squadron  (TES),  and  Red  Flag  at  Nellis,  sav¬ 
ing  combat-coded  units  from  having  to  deploy 
there  to  provide  such  support. 

With  noted  exceptions,  the  aggressor  pro¬ 
gram  has  demonstrated  continued  improve¬ 
ment  for  the  last  36  years,  expanding  from  its 
small-scale  proficiency  to  today’s  ability  to 
challenge  more  than  80  aircraft  in  a  Red  Flag 
scenario.  Hard  lessons,  such  as  those  learned 
in  1984,  have  become  imprinted  on  the  ag¬ 
gressor  program  and  continue  to  have  rele¬ 
vance  in  this  most  recent  era  of  expansion. 
The  following  review  of  the  three  most  impor¬ 
tant  lessons  from  the  past  applies  to  the  air, 
space,  and  cyber  domains;  keeping  them  in 
mind  will  help  the  program  stay  on  track  as  it 
continues  to  grow  and  adapt. 


Win-at-All-Costs  Mentality 

General  Fischer  delivered  his  severe  critique 
of  the  program  in  1984  as  a  reaction  to  a  cor¬ 
rosive  win-at-all-costs  attitude  that  eventually 
led  to  the  aggressors’  losing  sight  of  their  pri¬ 
mary  purpose — to  serve  as  a  training  aid  for 
Blue.  Having  existed  for  nearly  12  years,  the 
program  enjoyed  the  luxury  of  hand-selecting 
highly  experienced  and  capable  pilots — an  es¬ 
sential  level  of  expertise.  If  it  seemed  difficult 
to  execute  Blue  tactics  in  modern  aircraft,  it 
proved  doubly  so  to  replicate  Red  tactics  in 
significantly  less  capable  T-38s  and  F-5s.  In 
hindsight,  this  combination  of  substandard 
aircraft,  restrictive  tactics,  and  pilots  selected 
for  their  outstanding  flying  records  (individuals 
used  to  winning)  led  to  an  egocentric  attitude. 
Dying  for  a  living  goes  against  everything  that 
combat  aircrews  learn  in  training — from  the 
very  start  in  defensive  basic  fighter  maneuvers, 
pilots  are  told  to  “never  give  up.”  Even  the 
most  mature  aggressors  still  react  viscerally 
when  referred  to  as  “dead”  in  an  exercise. 

Preventing  aggressors  from  slipping  back 
into  the  win-at-all-costs  mentality  takes  careful 
selection,  strong  squadron  leadership,  and 
continual  emphasis  that  “we’re  here  to  train 
Blue — if  Blue  wins,  we  all  win.”  It  also  requires 
a  high  level  of  maturity  to  find  satisfaction  in 
acting  as  a  combat-training  aid.  Ed  Clemons, 
charter  member  of  the  64th  AGRS,  put  it  this 
way:  “The  best  possible  feeling  for  an  aggressor 
was  to  come  back  from  a  flight  out  of  breath, 
tired,  and  sweaty,  knowing  he  used  every  tac¬ 
tic,  employed  every  advantage  he  knows,  and 
still  did  not  come  away  with  a  ‘kill.’  ”16  The  cur¬ 
rent  ATG  selection  process  allows  the  group’s 
leadership  to  handpick  the  best  qualified  people 
from  the  pool  of  CAF  instructor  pilots  and  ex¬ 
perienced  four-ship  flight  leads  during  each 
assignment  phase,  in  an  effort  to  find  pilots 
with  the  right  balance  of  skill  and  maturity. 

Based  at  Nellis  AFB,  the  aggressors  are  sur¬ 
rounded  by  Weapons  School  instructors,  weap¬ 
ons  upgrade  pilots,  and  operational  test  pilots 
from  the  422nd  TES.  The  pressure  to  measure 
up  is  significant — continuously  losing  training 
engagements  has  the  potential  to  leave  aggres¬ 
sors  looking  for  opportunities  to  demonstrate 
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their  own  skills  that  set  them  apart  from  their 
peers  in  the  selection  process.  Left  unchecked, 
this  understandable  but  unacceptable  attitude 
can  lead  to  unprofessional  execution  and  in¬ 
creased  risk,  as  occurred  in  1984.  When  ag¬ 
gressors  are  allowed  to  feed  their  egos,  bad 
things  happen.  Prevention  starts  with  the  se¬ 
lection  process — stick-and-rudder  skills  are 
important,  but  a  mature  attitude  is  mandatory. 

Squadron  leadership  offers  the  second  anti¬ 
dote  to  the  win-at-all-costs  mentality.  Supervi¬ 
sors  can  identify  deviations  very  early  in  the 
process  of  an  aggressor’s  loss  of  focus.  The  key 
entails  actively  soliciting  feedback  from  those 
who  use  the  aggressors  as  training  aids.  Viola¬ 
tions  of  training  rules  should  always  merit  at¬ 
tention  during  debriefs.  Even  if  Red  flight 
members  don’t  report  violations  to  their  super¬ 
visors,  these  events  are  not  quickly  forgotten 
by  Blue.  AGRS  supervisors  need  to  develop  and 
sustain  a  relationship  with  their  Weapons  School, 
422nd  TES,  and  Red  Flag  peers  to  maintain 
awareness  of  pilot  performance  and  then  fol¬ 
low  up  on  violations.  As  the  self-professed 
“keepers  of  the  training  rules,”  leaders  must 
address  any  violation.  Failure  to  do  so  allows 
squadron  members  to  start  down  a  slippery 
slide  toward  unprofessional  behavior. 

Finally,  aggressors  need  constant  reminding 
that,  regardless  of  whether  they  win  or  lose, 
they  win.  If  they  design  and  execute  realistic 
adversary  replication  perfectly  and  if  Blue  fails 
to  manage  the  problem  appropriately,  then 
the  aggressor  pilots  can  employ  weapons  and 
kill  Blue  assets.  The  experience  will  burn  the 
lesson  into  the  Blue  pilots’  psyche  as  they 
make  the  long,  lonely  dead-man’s  journey 
back  to  Nellis.  During  debriefing,  the  threat 
expert  then  has  the  opportunity  to  explain 
the  origins  of  the  tactic  and  the  weakness  it 
sought  to  exploit.  Blue  pilots  win  when  they 
internalize  the  painful  lesson,  and  Red  forces 
enjoy  the  satisfaction  of  executing  their  tactics 
properly  and  winning. 

Happily,  this  scenario  has  become  increas¬ 
ingly  rare,  yet  Red  still  wins  even  when  Blue 
wins.  Keeping  in  mind  that  the  aggressor’s 
mission  is  to  make  Blue  better,  Red  derives  sat¬ 
isfaction  from  executing  that  mission  properly 
and  cheering  Blue  on  as  it  solves  the  problem 


presented.  But  this  requires  a  constant  mantra 
of  “when  Blue  wins,  we  win;  when  Blue  wins, 
we  win”  as  the  aggressor  is  “killed”  and  returns  to 
the  regeneration  airfield  to  do  it  all  again.  By  se¬ 
lecting  skilled,  mature  pilots;  by  keeping  a  close 
eye  on  training-rule  infractions;  and  by  con¬ 
tinually  reminding  pilots  that  in  this  business 
getting  beaten  is  a  good  thing,  we  can  assure 
that  aggressors  avoid  the  win-at-all-costs  trap. 

This  process  applies  to  space  and  cyber  ag¬ 
gressors  as  well.  Both  domains  are  still  work¬ 
ing  through  the  execution  of  tactics  in  an  un¬ 
opposed  setting;  we  must  closely  tie  adversary 
involvement  to  distinct  objectives  associated 
with  known  vulnerabilities.  Just  as  the  first  ag¬ 
gressor  road  show  to  Homestead  AFB  saw  Red 
significantly  altering  tactical  replication  to  meet 
student  training  objectives,  so  must  we  limit  and 
focus  aggressor  activity  in  the  growing  worlds 
of  space  and  cyber.  At  best,  “win  at  all  costs”  in 
these  nascent  disciplines  will  prove  counter¬ 
productive;  at  worst,  it  could  set  fledgling  ef¬ 
forts  such  as  network  operations  back  markedly. 

Ossified/Unrealistic  Tactics 

Even  if  aggressor  squadrons  use  only  the  most 
qualified  pilots  with  perfect  attitudes,  ossified, 
rigid  Red  replication  and  unrealistic  tactics 
can  also  detract  from  their  ability  to  prepare 
Blue  for  the  next  battle.  By  far  the  most  diffi¬ 
cult  aspect  of  the  professional  adversary  mission 
is  keeping  up  with  the  development  of  adver¬ 
sary  tactics.  Whereas  enemy  systems  improve 
over  time,  technology  is  limited  by  physics  and 
cost;  by  leveraging  intelligence  collection  and 
current  scientific  knowledge,  the  ATG’s  threat- 
assessment  processes  have  proven  able  to  ac¬ 
curately  assess  how  far  a  given  technology  can 
advance  in  the  next  five  to  eight  years. 17  Armed 
with  this  knowledge,  aggressors  can  modify 
systems/weapons/airframe  employment  to 
replicate  adversary  technology  with  a  high  de¬ 
gree  of  fidelity.  With  higher-echelon  support, 
the  ATG  has  enjoyed  considerable  success  in 
acquiring  threat-representative  equipment. 

Tactical  replication  presents  a  very  differ¬ 
ent  problem  since  the  development  of  tactics 
is  limited  only  by  the  imagination.  How  an  ad¬ 
versary  chooses  to  employ  his  technology  var- 
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ies  widely  across  nations/ cultures.  Highly  hi¬ 
erarchical  cultures  typically  dictate  tactics  to 
aircrews  through  rigid  command  and  control 
architectures.  More  liberal  cultures  tend  to 
delegate  tactical  decision  making  to  lower  levels, 
allowing  more  flexible,  responsive  execution. 
Tactics  have  infinite  possibilities;  that  is,  even 
closely  linked  allies  who  operate  similar  sys¬ 
tems — referencing  the  same  tactical  doctrine — 
develop  and  execute  noticeably  different  tac¬ 
tics.18  One  can  imagine  the  difficulty  in  observing 
and  documenting  these  tactics  in  insular, 
closed  societies.  When  charged  with  “accurate 
threat  replication,”  the  aggressors  face  a  di¬ 
lemma:  is  it  possible  to  know  how  an  adversary 
is  going  to  react  in  combat?  And  even  if  they 
do  manage  to  find  a  source  for  this  data,  with 
so  many  potential  adversaries,  which  do  they 
replicate?  Aggressors  seek  to  design  tactics 
that  resemble  those  observed  in  real/poten- 
tial  adversaries,  but  this  is  an  imperfect  sci¬ 
ence  at  best. 

Accurate  threat  replication  therefore  re¬ 
quires  constant  study  and  adjustment  to  pre¬ 
vent  tactics  from  becoming  rigid  and  dogmatic. 
It  also  demands  that  pilots  understand  the  cul¬ 
ture  they  seek  to  replicate,  an  endeavor  that 
has  recently  received  additional  emphasis.19 
The  “Aggressor  Threat  Replication  Guide”  de¬ 
lineates  tactics  that  duplicate  observed  Soviet 
tactical  behavior  as  well  as  postulated  country- 
specific  modifications,  based  on  intelligence  and 
the  impact  of  improved  systems  capabilities 
(active  missiles,  improved  radars,  data  links, 
etc.) .  The  simplicity  of  the  bipolar  world  allowed 
the  United  States  to  focus  on  Soviet  tactics;  to¬ 
day  the  problem  set  has  grown  significantly. 

Taken  to  the  extreme,  this  situation  argues 
for  nearly  infinite  tactical  possibilities,  de¬ 
pending  on  culture,  weapons  systems,  and  sce¬ 
nario.  For  the  aggressors,  replication  means 
little  if  it  does  not  serve  to  prepare  Blue  for  a 
wide  array  of  potential  combat  scenarios;  often¬ 
times,  however,  completely  realistic  replica¬ 
tion  takes  a  backseat  to  part-task  training, 
which  produces  yet  another  variable — Blue 
training  objectives.  Three  units  at  Nellis  AFB 
illustrate  this  well.  In  order  to  develop  the 
most  effective  Air  Force  systems  and  tactics, 
the  422nd  TES  requires  pristine  threat  systems 


and  tactics  replication.  Blue  systems  vulnera¬ 
bilities  identified  during  test  and  evaluation 
are  remedied  before  the  fielding  of  radars, 
jammers,  and  weapons  in  operational  units. 
The  422nd  also  requires  the  most  representa¬ 
tive  Red  tactics  the  aggressors  can  muster  as  it 
assesses  the  effectiveness  of  new  Blue  systems 
and  tactics. 

The  opposite  is  true  of  the  Weapons  School, 
where  attaining  accurate  threat  replication  is 
less  important  than  achieving  “Desired  Learn¬ 
ing  Objectives,”  also  the  title  of  a  graduate-level 
course.  In  this  course,  replication  require¬ 
ments  vary  as  mission  complexity  grows  from 
one-versus-one  aircraft  maneuvering  to  multi¬ 
formation  package  operations.  Weapons  School 
instructor  pilots  frequently  request  nonrepre¬ 
sentative  formations/execution,  seeking  to 
test  upgrading  students’  situational  awareness 
and  comprehension  of  Blue  tactics. 

On  the  “replication  versus  training”  spec¬ 
trum,  the  Red  Flag  audience  lies  somewhere 
between  the  422nd  TES  and  the  Weapons 
School.  On  the  one  hand,  Red  Flag  scenarios 
demand  accurate  threat  replication  to  validate 
the  execution  of  large  force-employment 
packages,  but  that  must  be  tempered  by  the 
requirement  to  train  not  only  the  air-to-air  es¬ 
cort  aircraft  on  the  leading  edge  of  the  pack¬ 
age  but  also  the  bomb  droppers  following  30 
miles  behind  them.  Perfect  replication  would 
result  in  training  for  only  a  few  flights  in  the 
package,  while  perfect  training  would  over¬ 
whelm  the  mission  commander’s  plans,  result¬ 
ing  in  mission  failure.  During  Red  Flag,  adver¬ 
sary  tactics  are  adjusted  to  both  validate  Blue 
tactical  execution  and  provide  training  to  as 
many  participants  as  possible. 

All  this  is  to  say  that  aggressors  walk  a  tine 
line  between  falling  back  on  known,  comfort¬ 
able  1980s  Soviet  tactics  and  starting  down  the 
slippery  slide  of  Nellis  freestyle,  designing  tac¬ 
tics  that  initially  challenge  Blue  but  eventually 
become  unsolvable,  hindering  valid  training. 
Aggressor  tactics  need  to  be  finite  but  adapt¬ 
able,  threat  representative  but  challenging, 
and  culturally  informed.  That’s  a  tall  order.  By 
actively  soliciting  feedback  from  Blue,  aggres¬ 
sors  can  ensure  that  presentations  meet  train¬ 
ing  and/or  replication  requirements.  Although 
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Blue  may  debate  a  new  tactic’s  viability  (espe¬ 
cially  if  it  works),  an  ongoing  dialogue  will 
serve  to  explain  the  thought  process  behind 
the  tactic  and  guarantee  that  threat  presenta¬ 
tion  meets  the  training  need.  The  tactic  has  to 
be  anchored  in  reality,  but  it  can’t  become  so 
rigid  as  to  stifle  Blue’s  learning.  Ideally,  ag¬ 
gressor  tactics  will  always  drive  Blue  forces  to 
deal  with  a  slightly  different  problem,  keeping 
them  flexible  and  improving  their  ability  to 
adapt  to  new  situations. 

Because  of  their  constant  engagement  in 
real-world  operations,  the  space  and  cyber 
realms  are  far  less  susceptible  to  the  problem 
of  ossified  aggressor  tactics.  Additionally,  ad¬ 
versary  capabilities  and  intent  in  these  do¬ 
mains  remain  largely  unknown.  No  one  could 
possibly  misinterpret  enemy  fighters  attacking 
friendly  aircraft  and  territory,  but  in  the  world 
of  space  operations,  blue-on-blue  interference 
and  adversary  jamming  are  often  indistin¬ 
guishable.  This  goes  double  for  network  op¬ 
erations;  the  spectrum  of  possible  adversaries 
ranges  from  teenage  hackers  to  nation-states, 
each  employing  different  tactics.  However,  as 
aggressor  programs  for  space  and  information 
mature,  they  too  will  develop  workable  tactics 
and  must  stay  mindful  of  the  need  to  continu¬ 
ally  challenge  Blue’s  flexibility. 

Failure  to  Show  Value 

An  environment  characterized  by  shrinking 
resources  threatens  any  activity  that  appears 
to  be  underperforming,  whether  it’s  a  new  sys¬ 
tem  or  an  established  organization.  Under¬ 
performance  comes  in  many  forms,  some  per¬ 
ceived,  some  real,  but  when  the  time  comes  to 
prioritize  a  program  during  resource  alloca¬ 
tion,  both  hard  facts  and  perceptions  about  it 
are  weighed  against  those  of  other  programs. 
A  line  is  drawn,  and  those  activities  that  don’t 
make  the  cut  don’t  get  fully  resourced.  Be¬ 
cause  aggressor  contributions  are  difficult  to 
quantify  (about  the  only  hard  fact  available  is 
travel  costs  saved  by  no  longer  having  to  de¬ 
ploy  units  to  Nellis  to  support  Weapons  School, 
test,  and  Red  Flag  adversary  support — about 
$7  million  in  2007),  the  aggressor  program 
stays  at  risk.20  Currently  a  high  priority,  the 


ATG  program  has  adequate  resources  and  has 
provided  tangible  benefit  to  operational  units. 
September  2007  saw  the  first  AGRS  road  shows 
in  seven  years  (the  64th  AGRS  to  Eglin  AFB, 
Florida,  and  the  65th  AGRS  and  507th  Air  De¬ 
fense  Aggressor  Squadron  to  Shaw  AFB,  South 
Carolina) .  The  33rd  and  20th  Fighter  Wings 
warmly  received  these  units,  which  provided 
dedicated  adversaries  and  boosted  threat 
awareness  through  detailed  academics  cover¬ 
ing  current  and  emerging  threats.  Having  a 
unit  offer  dedicated  professional  dissimilar 
adversary  support  with  well-studied  tactics  and 
specialized  equipment  (i.e.,  electronic  jam¬ 
mers)  takes  an  enormous  burden  off  opera¬ 
tional  squadrons,  but  the  impact  is  difficult  to 
quantify  in  fiscal  terms. 

With  the  potential  of  overpromising  and 
underdelivering  adversary  support,  the  ATG 
must  manage  expectations.  Still  in  the  growth 
phase,  it  will  reach  full  capability  in  2011.  In 
the  interim,  the  danger  lies  in  raising  expecta¬ 
tions  without  enough  people  or  equipment  to 
satisfy  them.  Once  the  64th  and  65th  AGRS 
reach  24  PAAs  each  and  the  18th  AGRS  at  Ei- 
elson  AFB,  Alaska,  completes  its  conversion  to 
18  PAAs  (Block  30  F-16s),  sufficient  capability 
will  exist  to  cover  all  adversary  requirements 
at  Nellis,  as  well  as  to  visit  every  fighter  unit  in 
the  continental  United  States,  Pacific  Air  Forces, 
and  US  Air  Forces  in  Europe  once  a  year  for 
two  weeks  (including  formal  training  units  at 
Tyndall  AFB,  Horida,  and  Luke  AFB,  Arizona)  .21 
Additionally,  the  527th  and  26th  Space  Aggres¬ 
sor  Squadrons  will  be  able  to  support  satellite 
communications  (SATCOM)  jamming  for  Air 
Force  Space  Command’s  operational,  test,  and 
training  requirements,  as  well  as  make  training 
available  in  jamming  the  global  positioning 
system  (GPS)  to  flying  and  other  units,  mostly 
during  Flag  exercises.  They  will  also  provide 
support  during  road  shows.  Finally,  the  57th 
and  177th  Information  Aggressor  Squadrons 
will  offer  training  in  network  attack  and  de¬ 
fense  to  Air  Force  Cyber  Command  network 
operators,  with  the  potential  to  continue  the 
current  effort  to  educate  individual  users 
through  focused  network-vulnerability  road 
shows  at  the  base  level. 
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The  aggressor  program  will  soon  claim  an 
operational  wing’s  complement  of  combat- 
capable  aircraft,  an  air  defense  aggressor  squad¬ 
ron,  two  squadrons  of  space  aggressors  (with 
GPS  and  SATCOM  jammers),  and  two  infor¬ 
mation  aggressor  squadrons — quite  a  bill  to  pay 
for  specialized  training.  Because  it  is  a  new  ini¬ 
tiative,  the  ATG  enjoys  the  benefit  of  the  doubt 
during  the  stand-up  phase.  Over  time,  should 
it  fail  to  continuously  demonstrate  value  for 
the  investment,  the  group  could  again  face 
the  same  programmatic  axe  it  did  in  1990. 

Looking  Ahead:  Integration  and 
Operational-Level  Support 

Because  the  Air  Force  moved  all  air/ space/ 
cyber  training  under  the  ATG  program,  the 
benefits  of  flying-aggressor  lessons  over  the 
years  have  been  actively  integrated  into  the  ac¬ 
tivities  of  space  and  cyber  aggressor  squad¬ 
rons.  Interestingly,  the  1 970s-styie  “safety  first” 
training  mentality  that  made  the  first  aggres¬ 
sor  road  show  so  unpalatable  to  TAC  units  is 
apparent  in  space  training  today.  Mistakes 
made  during  past  training  events  received 
high-level  scrutiny — the  fixes  have  had  the  ef¬ 
fect  of  making  realistic  training  too  hard  to 
do.  This  situation  resembles  the  one  that  ex¬ 
isted  as  the  Air  Force  (and  Navy)  conducted 
operations  in  Vietnam.  That  is,  the  services 
considered  dissimilar  training  too  dangerous 
to  practice  in  peacetime;  the  impact  on  war¬ 
time  performance  is  a  matter  of  record.  The 
aggressor  experience  highlights  the  need  for 
more  frequent  and  realistic  live  training,  not 
less.  Unfortunate  mistakes  occurred  early  in 
the  flying-aggressor  program  (resulting  in  the 
“Cancer  of  TAC”  speech  of  1984,  previously 
mentioned),  but  the  overall  effect  over  time 
has  been  to  reduce  accidents  and  improve  ca¬ 
pability.  Space  aggressors  have  steadily  advo¬ 
cated  the  delegation  of  SATCOM  jamming 
authority  down  to  levels  low  enough  to  allow 
timely,  effective  training.  The  more  that  units 
practice  their  expected  wartime  missions,  the 
lower  the  probability  of  errors. 

The  fledgling  aggressor  effort  for  space 
and  cyber  has  patterned  itself  after  three  de¬ 


cades  of  flying-aggressor  experience.  This  has 
proven  a  sound  approach  during  the  stand-up 
period,  but  as  these  disciplines  mature,  it  be¬ 
comes  increasingly  clear  that  each  will  develop 
its  own  unique  attributes.  Despite  their  differ¬ 
ences,  the  ATG  charter  calls  for  presenting 
the  “complete  enemy  target  set”  in  various 
stages  of  integration.  Depending  on  the  sce¬ 
nario,  air/ space/ cyber  will  sometimes  act  in¬ 
dependently,  sometimes  in  unison,  leveraging 
each  other’s  strengths  to  compound  the  prob¬ 
lem  for  Blue.  For  example,  in  a  recent  exercise, 
Blue  forces  compromised  key  position  and 
timing  information  on  air  packages  through 
sloppy  operations-security  procedures.  The  info 
aggressors  secured  the  sensitive  data  (the  ob¬ 
jective  is  to  make  US  and  coalition  forces 
stronger,  not  more  vulnerable)  and  then  passed 
it  to  the  air  and  air  defense  aggressors,  who 
decimated  the  lead  fighters  in  the  package.  It 
remains  to  be  seen  to  what  degree  real  and 
potential  adversaries  are  developing  the  ability 
to  integrate  effects,  but  the  ATG’s  mission  in¬ 
volves  anticipating  changes  in  the  character  of 
war — integration  of  air/ space/ cyber  effects  is 
coming  in  some  form. 

A  noteworthy  feature  of  the  ATG — its  inte¬ 
gration  of  air,  space,  and  cyber  disciplines  at 
the  squadron  level — enables  it  to  innovate  and 
experiment  without  excessive  coordination. 
Because  of  the  organization’s  relatively  small 
size  (500  people),  each  discipline  can  learn 
extensively  about  the  others.  Air  and  air  de¬ 
fense  aggressors  coordinate  their  tactics  with 
the  space  aggressors’  GPS  jamming  and,  in  the 
process,  learn  about  other  space  endeavors; 
meanwhile,  space  aggressors  gain  valuable  ex¬ 
posure  to  air  operations,  broadening  them  for 
follow-on  assignments  in  their  held.  Although 
air,  space,  and  cyber  professionals  tend  to  be 
stovepiped  in  the  broader  context  of  the  Air 
Force  and  Department  of  Defense,  the  small 
size  of  the  ATG  encourages  ongoing  interac¬ 
tion  at  this  level.  Lessons  from  this  interaction 
have  yielded  positive  learning  well  beyond 
Nellis’s  gates.22  Additionally,  even  though  air 
and  space  work  independently  and  jointly  in 
their  fairly  narrow  aggressor  realms,  informa¬ 
tion  operations  appear  to  hold  the  key  to  all 
integration  efforts  in  the  age  of  information- 
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enabled  warfare.  Information  aggressors  have 
interacted  with  everyone  in  the  group,  mak¬ 
ing  believers  of  them  all.  Once  the  ATG’s  indi¬ 
vidual  air/ space/ cyber  operators  become  fully 
aware  of  the  capabilities  of  the  other  domains, 
the  results  will  be  impressive. 

Before  becoming  an  aggressor,  one  must 
obtain  an  “instructor  pilot”  level  of  expertise 
in  a  particular  realm.  Although  aggressors 
spend  most  of  their  time  studying,  teaching, 
and  replicating  adversary  systems  and  tactics, 
they  also  rely  heavily  on  their  Blue  experience 
to  know  which  adversary  capabilities  will  pro¬ 
vide  the  most  realistic  training.  This  depth  of 
experience  is  shared  across  domains  in  courses 
such  as  Aggressor  101  (Introduction  to  Adver¬ 
sary  Tactics — a  broad  look  at  the  entire  ag¬ 
gressor  program,  taught  at  Nellis  and  required 
of  all  ATG  members)  and  follow-on  training, 
such  as  AGRS  202,  303,  and  so  forth.  Squad¬ 
ron  commanders  should  be  able  to  give  each 
other’s  mission  briefs,  an  effort  to  keep  ag¬ 
gressor  leaders  mindful  of  their  role  in  pre¬ 
senting  the  greater  enemy  target  set. 

Although  the  ATG  effort  will  be  self-limiting 
in  order  to  replicate  observed  and  realistic 
near-term  adversary  capabilities,  growing  inte¬ 
gration  will  certainly  produce  lessons  that  can 
accrue  to  broader  cross-domain  efforts  in  the 
Air  Force.  Again,  ATG  members’  firsthand  ex¬ 
perience  operating  in  the  air,  space,  and  cyber 
domains  will  enable  them  to  better  under¬ 
stand  how  these  can  combine  to  challenge 
Blue  with  likely  future  scenarios  in  various  ex¬ 
ercise  and  experimentation  venues  (Virtual 
Flag,  for  instance).  Just  as  importantly,  the  ex¬ 
perience  will  also  inevitably  reveal  strengths 
and  weaknesses  associated  with  increasing  in¬ 
tegration.  The  ATG  will  capture  and  transmit 
these  lessons  through  mechanisms  such  as  tac¬ 
tics  conferences  and  USAF  Warfare  Center 
publications  for  greater  Air  Force  use  outside 
the  ATG. 

Beyond  the  integration  of  tactical-level  effects 
exists  the  possibility  of  moving  this  training  to 
the  operational  level.  Aggressor  squadrons  spe¬ 
cialize  in  creating  tactical  effects  that  have  al¬ 
ready  seen  use  in  operational-level  exercises 
such  as  Virtual  Flag  to  provide  realistic  and  at 
times  unexpected  adversary  scenarios.  Although 


it  might  be  possible  to  use  the  ATG’s  combined 
knowledge  of  adversary  capabilities  and  inten¬ 
tions  to  effectively  train  operational-level  organi¬ 
zations  such  as  air  operations  centers  and  air 
support  operations  centers,  this  would  cross  into 
the  realm  of  “red  teaming” — clearly  not  in  the 
ATG  charter.23  However,  the  ATG  could  coordi¬ 
nate  with  organizations  that  already  do  red 
teaming  (e.g.,  the  Air  Force  Research  Labora¬ 
tory  and  the  Agency  for  Defense  Analysis)  to 
make  training  at  the  operational  level  of  war 
as  realistic  and  meaningful  as  possible. 

Conclusion 

Today’s  expanding  Air  Force  aggressor  pro¬ 
gram  is  built  on  36  years  of  valuable,  some¬ 
times  painful,  experience  that  will  advise  the 
development  of  integrated  air,  space,  and  cy¬ 
ber  training.  Not  every  lesson  from  the  past 
will  apply  to  space  and  cyber  aggressors,  but 
hard-learned,  universal  aggressor  “laws”  do 
exist.  Allowing  aggressors  to  slip  into  a  win-at- 
all-costs  mentality,  failing  to  keep  up  with  re¬ 
cent  developments  and  settling  into  comfort¬ 
able  but  ossified  tactics,  or  forgetting  the 
wider  Air  Force /joint  audience  and  thereby 
failing  to  show  value  would  quickly  undermine 
the  program.  Current  ATG  TTPs  include  a 
multitude  of  other  lessons:  pitfalls  such  as  tak¬ 
ing  on  an  assessment  role  (one  of  the  factors 
that  made  the  first  aggressor  road  show  unde¬ 
sirable),  attempting  to  teach  Blue  forces  their 
own  tactics,  or  developing  exceedingly  diffi¬ 
cult  tactics  that  replicate  a  threat  which  doesn ’t 
exist.24  These  apply  not  only  to  the  flying  pro¬ 
gram  but  also  to  all  aggressor  domains.  Yet, 
the  space  and  cyber  aggressors  will  develop 
their  own  domain-unique  lessons  that  they 
will  need  to  incorporate  into  their  own  TTPs 
and  then  share  with  the  other  domains  to  en¬ 
sure  that  integration  doesn’t  create  problems. 

The  primary  ATG  focus  in  this  regard  en¬ 
tails  maintaining  a  spirit  of  continuing  evolu¬ 
tion,  driven  by  ever-increasing  knowledge  of 
the  adversary’s  technology  and  tactics.  Closely 
linked  to  Air  Force  and  national  intelligence 
activities,  members  of  the  ATG  take  pride  in 
their  ability  to  “know,  teach,  and  replicate” 
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the  adversary  as  one  of  only  a  few  Air  Force 
organizations  specializing  in  breaking  down 
barriers  between  operations  and  intelligence. 
This  culture  of  continuous  revalidation  (the 
“know”  of  “know,  teach,  replicate”)  makes  the 
program  well  suited  to  taking  the  next  step  in 
high-fidelity  training — integrating,  expand¬ 
ing,  and  increasingly  overlapping  air,  space, 
and  cyber  capabilities.  Whether  aggressors 
provide  a  two-ship  formation  of  Red  Air  for 
supporting  upgrade  training  at  Shaw  AFB  or 
combine  air,  space,  and  cyber  effects  to  train  a 
widely  dispersed  Virtual  Flag  audience,  the  fo¬ 
cus  remains  on  valid,  realistic  training  to  pre¬ 
pare  the  Air  Force  for  future  warfare. 
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